Re: bin/57124: pkg_add in 10.0_BETA prints "Unknown http error" when accessing NetBSD CDN over HTTPS

[Joerg Sonnenberger <joerg%bec.de@localhost>]

Am Tue, Dec 20, 2022 at 06:35:02PM +0000 schrieb Michael van Elst:
> The following reply was made to PR bin/57124; it has been noted by GNATS.
> 
> From: mlelstv%serpens.de@localhost (Michael van Elst)
> To: gnats-bugs%netbsd.org@localhost
> Cc: 
> Subject: Re: bin/57124: pkg_add in 10.0_BETA prints "Unknown http error" when accessing NetBSD CDN over HTTPS
> Date: Tue, 20 Dec 2022 18:30:58 -0000 (UTC)
> 
>  nia%pkgsrc.org@localhost writes:
>  
>  >pkg_add is struggling to load any packages from cdn.netbsd.org over
>  >HTTPS. This is likely caused by a deficiency in the embedded copy of
>  >libfetch that pkg_install users.
>  
>  libfetch in base doesn't know about SNI. I have a tiny patch for this,
>  but it might be better to update libfetch. It lacks other things and
>  also doesn't validate SSL certs.

Yeah, just importing the version from pkgsrc should do that. I haven't
commited SSL certificate validation because it would break every NetBSD
system...

Joerg